rule SpyNote
{
	meta:
		author = " Kevin Breen <kevin@techanarchy.net>"
		maltype = "Remote Access Trojan"
		filetype = "apk"
		notes = "This needs to be a lot better; this is just for testing"

	strings:
		$a = "resources.arscPK"
		$b = "res/xml/device_admin.xmlPK"
		$c = "AndroidManifest.xmlPK"
		$d = "res/drawable/abc_btn_default_mtrl_shape.xmlPK"

	condition:
		all of them
}